$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: aUb6KRPYW69nfKmqEcTaixAC5ujGDM3i1++rh7zJFBE= Subject key identifier: 0B:B6:4A:4A:EA:EB:CE:0C:5B:60:16:5F:B7:7D:E7:0D:AE:FE:73:39 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 0198D73BB898987759416737F8D1DA45C15B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 14:01:11 +0000 Manifest this update: Sat 23 Aug 2025 14:01:11 +0000 Manifest next update: Sun 24 Aug 2025 14:01:11 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: zHf6Ta+jnfZF4e9kRFd+OfbH/B0JzYzRAdYzw+N8gqQ=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:b8:98:98:77:59:41:67:37:f8:d1:da:45:c1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Aug 23 14:01:11 2025 GMT Not After : Aug 24 14:01:11 2025 GMT Subject: CN=0bb64a4aeaebce0c5b60165fb77de70daefe7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:0b:34:b6:21:a3:3d:8a:99:8e:4e:75:b3: 05:32:87:f6:50:76:64:be:50:5d:0e:2b:54:c5:31: c3:2c:44:5c:e7:0c:12:19:fc:b3:f0:de:58:e6:ca: ec:c7:e6:b0:2b:f3:15:15:34:76:f0:dc:52:d0:11: e5:8d:59:36:14:6c:5c:1e:6f:cc:d3:68:76:01:ed: 21:55:ea:90:95:b7:c9:c5:70:f3:05:0c:c8:7d:29: 59:f8:cd:c9:06:78:b5:1a:3d:e0:f8:a3:b1:86:8f: 06:08:3c:92:82:de:26:bd:95:ce:fb:81:c2:01:ce: 75:a3:47:12:f5:6c:39:82:10:bf:e6:bd:85:20:4c: f6:c3:16:c1:47:82:72:e7:62:5b:78:73:9f:0f:bb: fd:75:0f:c8:c5:9c:ca:20:fc:59:a5:97:6a:c8:0f: 90:f0:19:c0:1b:a9:7b:1d:cb:d7:84:37:0c:f8:d7: 40:cd:40:6e:15:a3:f4:0a:98:fc:13:68:c8:23:2a: c6:cf:4a:6a:54:5c:bf:86:a6:93:23:4d:e6:5a:44: 1b:84:a5:f0:ec:74:0b:59:34:47:67:64:2c:9c:1e: 83:c6:3f:98:fb:4c:5b:0f:33:bd:6a:7a:e0:c0:b7: 1f:c3:57:3d:04:c9:9c:ac:a5:90:5a:c2:45:31:e2: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B6:4A:4A:EA:EB:CE:0C:5B:60:16:5F:B7:7D:E7:0D:AE:FE:73:39 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7a:93:49:48:10:52:ef:c4:7a:d7:3e:53:70:9a:1b:6d:25: b6:e8:29:8e:10:b1:cc:da:6a:fa:6a:83:f7:fb:db:d7:64:f3: b1:ed:82:1b:44:3f:ce:4d:75:f3:f5:41:a4:92:f0:03:a8:b4: fd:62:06:0d:c5:d9:35:58:c1:d5:3e:ce:77:03:01:0b:2b:59: dd:3a:56:a6:ba:2c:6b:63:6a:72:e0:c0:c8:33:7b:9a:3e:f4: 69:63:be:e6:0d:70:b9:bc:e3:4a:e6:5f:61:cf:4d:a0:3c:36: f5:cf:a6:17:06:86:ed:36:d1:ca:21:4b:ed:36:41:d7:cd:49: 51:f3:93:ff:8b:7c:0f:b5:37:d7:ce:5f:8a:74:6f:53:b6:3e: 56:9f:dd:fb:da:c2:2c:3f:78:b2:67:f8:61:f5:d8:a7:b6:0d: e7:87:10:ce:d2:a8:b6:46:c9:49:67:10:a5:14:d2:ea:ff:7d: 37:cd:a7:11:6f:60:5f:0e:e8:fb:e9:6d:05:e1:cb:b3:1e:04: d8:61:b1:c1:da:d6:ae:14:ed:a0:e1:88:39:ea:eb:bf:b7:fd: 34:ae:a8:24:62:7f:f0:bb:3a:71:94:b0:04:11:a6:4d:a1:1f: 45:b5:f7:a4:58:63:e9:13:3d:bc:39:b8:e8:6e:b8:b6:7d:e0: bf:c7:d2:7c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZjXO7iYmHdZQWc3+NHaRcFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwODIzMTQwMTExWhcNMjUwODI0MTQwMTExWjAzMTEwLwYDVQQD EygwYmI2NGE0YWVhZWJjZTBjNWI2MDE2NWZiNzdkZTcwZGFlZmU3MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYLNLYhoz2KmY5OdbMFMof2UHZk vlBdDitUxTHDLERc5wwSGfyz8N5Y5srsx+awK/MVFTR28NxS0BHljVk2FGxcHm/M 02h2Ae0hVeqQlbfJxXDzBQzIfSlZ+M3JBni1Gj3g+KOxho8GCDySgt4mvZXO+4HC Ac51o0cS9Ww5ghC/5r2FIEz2wxbBR4Jy52JbeHOfD7v9dQ/IxZzKIPxZpZdqyA+Q 8BnAG6l7HcvXhDcM+NdAzUBuFaP0Cpj8E2jIIyrGz0pqVFy/hqaTI03mWkQbhKXw 7HQLWTRHZ2QsnB6Dxj+Y+0xbDzO9anrgwLcfw1c9BMmcrKWQWsJFMeLRCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAu2Skrq684MW2AWX7d95w2u/nM5MB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHqT SUgQUu/Eetc+U3CaG20ltugpjhCxzNpq+mqD9/vb12Tzse2CG0Q/zk118/VBpJLw A6i0/WIGDcXZNVjB1T7OdwMBCytZ3TpWprosa2NqcuDAyDN7mj70aWO+5g1wubzj SuZfYc9NoDw29c+mFwaG7TbRyiFL7TZB181JUfOT/4t8D7U3185finRvU7Y+Vp/d +9rCLD94smf4YfXYp7YN54cQztKotkbJSWcQpRTS6v99N82nEW9gXw7o++ltBeHL sx4E2GGxwdrWrhTtoOGIOerrv7f9NK6oJGJ/8Ls6cZSwBBGmTaEfRbX3pFhj6RM9 vDm46G64tn3gv8fSfA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:33 2025 by rpki-client